lesmoque

CureIt log attached. cureit.log

Understood. OK, the results of the FRST fix are attached. Fixlog.txt

Yes, I use ProtonVPN. Could you explain how to cycle my router/modem? Also, I'm actually not now seeing the the same proxy server settings as before. In the 'Proxy settings' dialog box, the 'Manual proxy setup' is now off, and only the 'Automatically detect settings' box is checked. (Screenshot attached.) Also the apps that were previous not connecting and displaying 'Proxy error' messages (e.g., Mail, etc.) In light of those facts, should I still run the fix above? I could instead just try unchecking that box in the 'Proxy settings' box.

Restarted, and new set of logs attached. securitycheck2.txt FSS.txt FRST2.txt Addition2.txt

Thank you. I took the steps in your message, and ran a Microsoft Safety Scanner full scan, and it took several hours. It showed some apparent detections during it, but then the final message was 'No unwanted files' found. Unfortunately, it seems that a log file (msert.log) wasn't created after the scan. I've looked in the C:/Windows/debug folder for the log as instructed above, and also searched for it in Windows explorer. But it doesn't seem to have been created. Is there another scan I should run, or other steps I should now take?

Thank you. That FRST fix ran successfully, and I've attached the fixlog txt file here. In answer to your other questions: (0) No, I don't currently use Avast VPN. (I've just uninstalled it.) (1) I've also uninstalled CCleaner and CCleanerBrowser as you suggested. (2) No, I don't know what those certificate files are, and I don't believe I saved them there myself. Fixlog.txt

OK thank you so much. I remembered that the reason I had Trend Micro was that my employer had a license for it a few years, and I didn't realize it was no longer current. I uninstalled it, Windows Security/Windows Defender then immediately detected and quarantined a severe threat, a trojan (screenshot below). For what it's worth, the powershell process that's referred to in that screenshot showed up for me, earlier, as associated with that port number that the proxy server kept setting itself to, no matter what I did. I've also attached the new set of logs that you requested, using the Malwarebytes Support Tool. I've also run another Malwarebytes scan, FRST scan, and Security Check scan, and I've attached those results too. The AdwCleaner scan again shows no items to clean, so I haven't attached a clean log for that. mbst-grab-results.zip Malwarebytes Scan Report 2024-04-25 021114.txt FRST1.txt Addition1.txt SecurityCheck1.txt

Hi again. That Trend Micro/Apex One antivirus not a paid version, no. I wasn't aware it was out of date, since it seems to still be updating its virus definitions, etc (see attached screenshot). But I'd be happy to uninstall it if you think that's best. Should I take further steps to resolve the proxy server issue after uninstalling Trend Micro, or is that likely what's causing the issue? I wasn't sure what you meant by "if the other does not exist"; if I should re-send any of the logs of the scans you asked for, I'd be happy to do that.

Hi again. Here are the requested logs attached; apologies that the AdWCleaner log didn't attach properly in my previous reply. Thank you again for your help. AdwCleaner[S01].txt SecurityCheck.txt FSS.txt

Thank you. I've made the request system changes, andAdwCleaner[S01].txt run the requested scans. The logs of those scans are attached. Malwarebytes Scan Report 2024-04-24 055808.txt Addition.txt FRST.txt

Hi, I wonder if someone could help me with a potential malware/unwanted program issue. I've noticed recently that in my computer's proxy settings, in 'Manual proxy setup', the 'Use a proxy server' setting continually switches back on, and displays Proxy IP address as 'http://https=localhost' and a Port as 2520 (although that number sometimes changes. A lot of apps (e.g., Mail, etc.) are suddenly now saying 'Proxy error' and not connecting. Microsoft Safety Scanner and other malware/virus scans haven't shown any problems yet, but after reading about this online, I have some reason to believe that some proxy malware may be the issue. Could anyone help me find out how to diagnose/fix the problem? I would be very grateful. Many thanks.